Observed arrival · 2026-11-02
Proofsheet turns firmware files into SBOMs and CRA paperwork
Upload firmware or an app to get a component list, prioritized vulnerability findings, and optional Cyber Resilience Act documents.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Connected-product teams handling firmware and CRA documentation
- Worth noticing
- Its sample uses made-up router firmware and shows six of 142 components, with a reason beside each status.
Field notes
Uploads are capped at 200 MB, and the page lists gzip, tar, zip and cpio firmware images alongside Android apps and desktop software; encrypted firmware is excluded. The sample output shows components with versions and status labels such as “Update,” “Out of support” and “Fine.” Full exports are offered in CycloneDX 1.5 and SPDX 2.3, while the CRA annex map marks 22 points as evidenced, partial or open. The site says files are not run and no person opens them.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue